SUSE-SU-2026:23321-1: rmt-server&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:23321-1 is a vulnerability in rmt-server&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 25-08-2026
   PublishedVulnerability first disclosed.
2. 10-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for rmt-server This update for rmt-server fixes the following issues: Update to version 3.1 (bsc#1274715). Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398). - CVE-2026-26962: rack: improper unfolding of folded multipart headers can lead to downstream header injection and response splitting(bsc#1261471). - CVE-2026-34763: rack: unescaped regex interpolation of configured root path can lead to root directory disclosure (bsc#1261406). - CVE-2026-34230: rack: crafted `Accept-Encoding` headers can cause a denial of service (bsc#1261388). - CVE-2026-34785: rack: prefix matching logic can lead to the exposure of unintended files under the static root (bsc#1261417). - CVE-2026-34786: rack: URL-encoded path mismatch can lead to `header_rules` bypass (bsc#1261426). - CVE-2026-34826: rack: missing individual byte range limit checks when parsing HTTP `Range` headers can lead to excessive resource consumption and a denial of service (bsc#1261436). - CVE-2026-34829: rack: multipart parsing without `Content-Length` header can lead to unbounded chunked file uploads and a denial of service (bsc#1261447). - CVE-2026-34230: rack: quadratic complexity when processing of wildcard `Accept-Encoding` headers can lead to a denial of service (bsc#1261388). - CVE-2026-34830: rack: improper sanitization of the `X-Accel-Mapping` request header can lead to the exposure of unintended files via `X-Accel-Redirect` (bsc#1261458). - CVE-2026-34831: rack: `Content-Length` header and body byte size mismatch when creating error responses can lead to incorrect HTTP response framing (bsc#1261466). Other updates and bugfixes: - Version 3.1: * Remove all errors and warnigs due to new Ruby and Ruby on Rails versions - Version 2.28: * Set arch to unknown for Rancher based products (jsc#SCC-759) * Fix purge for large amount of systems (bsc#1262706) * Change data type to `MEDIUMTEXT` in profiles table (bsc#1268305) * Remove `proxy_byos` column * Fix race condition when no system matches (bsc#1268301) * Fix race condition for PAYG (bsc#1268149) * Fix race condition to update a system (bsc#1268303) - Version 2.27: * Fix ReDoS vulnerability in `Addressable` * Fixes out-of-bounds read vulnerability in `rdiscount`

No weakness data has been published for this record.